Re: pimpshiz / put i.txt

["Cashdollar, Larry" <larry.cashdollar () AKAMAI COM>]

> I have spoken to pimpshiz, and he DOES NOT use the RDS' sploit.  He does
use
> a 0day, but I am unsure of it's nature.  He has defaced all IIS/NT servers,
> so that at least narrows it down.  More logs would be nice though.


If pimpshiz has a 0 day exploit for IIS/NT 4.0 Why is he defacing these no
name sites?
If we look at attrition I see the sites he has defaced are low profile.  If
I take a look at netcraft I see that IIS/NT 4.0 is also being used by nasdaq
and the NFL.  It is my guess that he has a customized RDS' script which he
probably tweaked a little and calls it 0 day.